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ABSTRACT 



A distributed policy model for access control is disclosed. In 
an en terpri.se -only mode, each node within a networking 
environment has its resource access governed by the same 
enter prise- wide policy. The enterprise -wide policy is set 
through creation of one or more enterprise policy objects. In 
an integrated mode, nodes are organized in a number of 
arrays. Each array has an a nay- wide policy set through 
creation of an array policy object. Each array-wide policy 
initially inherits the enterprise-wide policy. Additional 
resource, access and protocol use restrictions can be added to 
the individual array -wide policies. In an array-only mode, 
each array has an array -wide policy also set through creation 
of an array policy object, but the policy does not necessarily 
initially inherit an enterprise -wide policy. In a siaud-alune 
mode, a single server has its own policy. 
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